Lehigh Valley Data Breach Affects 17,892 People

Lehigh Valley Restaurant Brands, a restaurant franchise operator based in Allentown, Pennsylvania, that operates restaurants including Red Robin and Wingstop, experienced a data breach that affected 17,892 people in the United States.

Lehigh Valley Restaurant Brands first learned of suspicious activity on its computer systems on Jan. 12, 2026. In response, the company took steps to verify the security of its network, restore systems from backups and determine what occurred.

During the investigation, the company identified that certain files were copied without permission on Dec. 13, 2025. After identifying the affected files, the company completed a comprehensive review to determine their contents and to whom they related. The review of contact information for affected individuals was completed on or around June 10, 2026.

On Feb. 5, 2026, a ransomware group known as Payouts King claimed responsibility for the attack on a dark web forum. The group stated it had obtained 411 GB of the company's internal data and threatened to publish the data within six to seven days. The compromised information reportedly included employee personally identifiable information, corporate documents, agreements, contracts, confidential correspondence, financial records, invoices, budgets and employees' personal files.

The types of personal information confirmed to have been exposed in the incident included names and Social Security numbers.

The breach was disclosed to attorneys general of Massachusetts, New Hampshire and Indiana. The company began sending notification letters to affected individuals on Aug. 6, 2026.

Lehigh Valley Restaurant Brands' response to the breach

The company is offering complimentary credit monitoring, credit report and credit score services through Cyberscout, a TransUnion company.

To enroll, affected individuals can visit the Cyberscout activation page and enter the unique code provided in their notification letter. Enrollment must be completed within 90 days of the date of the letter.

The company also set up a dedicated toll-free assistance line at 1-855-308-7510, available Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern Time. Affected individuals may also write to Lehigh Valley Restaurant Brands, Attn: Compliance, 6802 Hamilton Blvd., Allentown, PA 18106.